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LI 


62 


("709"/$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or "7267$.ccls.) and 
(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling))) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$ or 

iiuc or iiiir ubiun or iub j diiu 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt^ or instruction? or 
command or function)) and 
execution and @ad< "20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/08/01 16:51 


L2 


85 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupts or countermeasur$ or 
overfllow$ or "libc" or intrusion or 
IQ5 ) auu ^rrame^ or Duiicr^> or 
stack$) and (("ret" or return) with 
(exception? or interrupt^ or 
instruction? or command or 
function)) and execution and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/08/01 16:52 


L3 


287 


(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$ or "libc" or intrusion or 
ios j ana ^irame^ or Durien{> or 
stack$) and (("ret" or return) with 
(exception? or interrupt$ or 
instruction? or command or 
function)) and execution and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/08/01 16:53 
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L4 


477 


(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 

UVCIIIIUW^> Ul IIUL. Ul IIIUUOIUII Ul 

"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(exception? or interrupt$ or 
instruction? or command or 
function)) and execution 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/08/01 16:53 


L5 


243 


(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 

m/orfl lnuu<t or "liKr" nr intriicinn nr 

UVCIIIlUWZp Ul IIUC Ul IMUUblUM Ul 

"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(exception? or interrupt$ or 
instruction? or command or 
function)) and execution 


US-PGPUB; 
EPO; JPO 


OR 


OFF 


2007/08/01 17:03 


L6 


147 


(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
ovciTiiowq) or iiuc or intrusion or 
"ids") and (frame$ or buffer$ or 
stack$) with (("ret" or return) with 
(exception? or interrupt or 
instruction? or command or 
function)) and execution 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/08/01 17:05 



8/1/07 5:11:00 PM 

C:\Documents and Settings\RBaum\My Documents\EAST\workspaces\10671202.wsp 



Page 2 



EAST Search History 



L7 


54 


(((unix or linux or window? or "os" 
or operating) with (hook? or stall or 
stalling or trace or tracing))) and 
(hijack$ or risk or security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 

n\/p rfllnw^t nr "lihr" nr intru^inn nr 

VJVCI 1 IIUW^> \Jl IILA# VJI II ILI UOIVJI 1 \Jl 

"ids") and (frame$ or buffer$ or 
stack$) with (("ret" or return) with 
(exception? or interrupt$ or 
instruction? or command or 
function)) and execution 


US-PGPUB; 
EPO; JPO 


OR 


OFF 


2007/08/01 17:05 


S5 


0 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
"windows hook<;" or "o*; hooks"^ 
and (malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO' JPO 1 
DERWENT; 
IBM.TDB 


OR 


OFF 


2007/03/06 11:11 


S7 


1 


("709"/$.ccls. or "3807$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window$ or "os") 

arli? (hank? nr <;tall<fc^ and 

(malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 

DERWENT" 
IBM_TDB 


OR 


OFF 


2007/02/27 16:30 


S8 


1 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and 

(ma\\MPir& nr x/iniQ nr virucpc nr 

^MIOIWGIC KJl VII UD \Jl VII UDCO \Jl 

trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (call or "api" or 
buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


OFF 


2007/02/27 16:33 


S9 


6 


(((unix or linux or window$ or "os") 
adj2 (hook? or stall$)) and 
^maiware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
overfllow$) with (call or "api" or 
buffer$ or stack$)) 


US-PGPUB; 
USPAT; 

CrU, Jr\Jf 

DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:32 
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S10 


20 


("709"/$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or "7267$.ccls.) and 
(((unix or linux or window$ or "os" 
or "operating system") adj2 (hook? 
or stall$ or intercept? or interdict$ 

r\r rzkr\¥\ \r£W anH ^ maliA/aro or \/iriic 

or Capture aiiu ^rnaiware or virub 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countermeasur$ or overfllow$) with 
(call or "api" or buffer$ or stack$)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/02/27 16:50 


S15 


144 


("709"/$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or M 7267$.ccls.) and 
(((unix or linux or window$ or "os" 
or "operating system" or Solaris or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 
or cornprornib^ or corrupt^ or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/08/01 16:48 


S16 


388 


(((unix or linux or window$ or "os" 
or "operating system" or Solaris or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 

r\r rAmnfomici or r"orriiot"<t or 

or compromise or corrupt? or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
@ad<"20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/01 14:30 


S17 


141 


(((unix or linux or window$ or "os" 
or "operating system" or Solaris or 
"os9") same (event or exception or 
hook? or stall$ or intercept? or 
interdict$ or captur$)) and (malware 
or virus or viruses or trojan? or 
worm? or commandeer$ or attack$ 
or compromise or corrupt? or 
countermeasur$ or overfllow$) with 
(thread? or process or call or "api" 
or buffer$ or stack$ or 
application?)) and dispatch$ and 
handler? and @ad< "20030925" 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/01 14:30 
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S18 


0 


("709"/$.ccls. or "380"/$.cds. or 
"713"/$.ccls. or "7267$.ccls.) and 
(((window? or "os" or operating) 
adjl hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
comDromisS or corruDti or 
countermeasur$ or overfllow$ or 
"libc") and (frame$ or buffer$ or 
stack$) and (("ret" or return) adj2 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/06 11:18 


S19 


59 


("709"/$.ccls. or "3807$.ccls. or 
"713"/$.ccls. or *7267$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
romnromK$ or rorrunti or 
countermeasur$ or overfllow$ or 
"libc") and (frame$ or buffer$ or 
stack$) and (P'ret" or return) with 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/06 11:21 


S20 


61 


("7097$.ccls. or "380"/$.ccls. or 
"7137$.ccls. or "726"/$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (malware or virus 
or viruses or trojan? or worm? or 
commandeer$ or attack$ or 
cornpror ur lumujjup ui 
countermeasur$ or overfllow$ or 
"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (instruction? 
or command or function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


OR 


OFF 


2007/03/06 11:22 


S21 


67 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726"/$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 

UUllUpLZp UI L.UUI ILCI 1 1 ICdDUl UI 

overfllow$ or "libc" or intrusion or 
"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


OFF 


2007/03/06 11:30 
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S22 


68 


("709"/$.ccls. or "380"/$.ccls. or 
"713"/$.ccls. or "726'7$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (security or 
malware or virus or viruses or 
trojan? or worm? or commandeer$ 
or attack$ or compromis$ or 
corrupt$ or countermeasur$ or 
ovprfllowt or "lihr" or intrusion or 

UVCIIIIvVIf VI IIU\* V/l II III UJIUI 1 \JI 

"ids") and (frame$ or buffer$ or 
stack$) and (("ret" or return) with 
(exception? or interrupt^ or 
instruction? or command or 
function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/06 11:48 


S23 


68 


("7097$.ccls. or "380"/$.ccls. or 
"7137$.cds. or "726"/$.ccls.) and 
(((window? or "os" or operating) 
with hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupts or 

mi infornriMCi ir*fc rir r\\/c* rfl 1 r\\Ai <fc nr 
cuuriLcrnicdbur^ ur uvciimuvv^ ur 

"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt^ or instruction? or 
command or function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/06 11:50 


S24 


147 


(((window? or "os" or operating) 
with hook?)) and (hijack$ or risk or 
security or malware or virus or 
viruses or trojan? or worm? or 
commandeer$ or attack$ or 
compromis$ or corrupt$ or 
countcrrncobur^) ur uvcriuuw.p or 

"libc" or intrusion or "ids") and 
(frame$ or buffer$ or stack$) and 
(("ret" or return) with (exception? or 
interrupt$ or instruction? or 
command or function)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/08/01 16:46 


S25 


2 


"6412071".pn. 


USrPGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


OFF 


2007/03/06 16:58 
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